SOC Analyst L2

SOC Analyst

Location: Calicut

Employment Type: Full-Time (Remote work for international clients | 24/7 Shift Rotation)

Experience Level: Mid-Level (4–7 Years)

Salary: Negotiable based on experience
Preferred Certifications: CySA+, SC-200, GCIH, CHFI, or equivalent.

About the Role

We are expanding our operations in Kerala. We are seeking an experienced SOC Analyst to join our team. In this role, you will deliver security monitoring, threat detection, incident investigation, and response services for international clients.

Qualifications & Requirements

• Education: Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field.
• Experience: 4–5 years of relevant SOC/Cybersecurity experience.
• Mandatory Certifications: CEH or CompTIA Security+.
• Preferred Certifications: CySA+, SC-200, GCIH, CHFI, or equivalent.
• Languages & Soft Skills: Excellent English communication, documentation, and client-handling skills. Basic Arabic reading/writing ability is required.
• Flexibility: Willingness to work in rotating shifts to support global clients.

Technical Skills

• SIEM & EDR/XDR: Hands-on experience with Microsoft Sentinel, Splunk, IBM QRadar, Elastic, or LogRhythm; experience with Microsoft Defender, CrowdStrike, SentinelOne, or Sophos.
• Networking & Systems: Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, IDS/IPS, email security, Windows, Linux, Active Directory, M365, and cloud environments.
• Frameworks & Threats: Familiarity with MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat-intelligence platforms; solid grasp of malware, phishing, ransomware, brute-force, privilege escalation, and exfiltration vectors.
• Vulnerability Assessment: Experience with tools like Nessus, Qualys, OpenVAS, or Rapid7.
• Scripting: Basic automation or scripting skills in PowerShell, Python, Bash, or KQL.

Key Responsibilities

• Security Monitoring & Triage: Monitor and investigate security events using SIEM platforms; perform incident triage, threat analysis, containment, and root-cause analysis.
• Detection Engineering: Develop and fine-tune SIEM correlation rules, alerts, dashboards, and detection use cases.
• Threat Hunting & Investigation: Conduct threat hunting using IOCs and attacker behavior; investigate endpoint, network, email, identity, and cloud security incidents.
• Log Analysis: Analyze Windows, Linux, firewall, VPN, Active Directory, DNS, proxy, and application logs.
• Vulnerability & Remediation: Support vulnerability assessments, risk prioritization, and remediation tracking.
• Reporting & Client Communication: Prepare incident reports, executive summaries, and security recommendations; communicate findings directly to international clients.
• Process Enhancement: Maintain SOC playbooks, escalation procedures, and knowledge-base documentation.

Ability to commute/relocate:

• Calicut, Kerala: Reliably commute or planning to relocate before starting work (Required)

Experience:

• working with Middle East clients: 1 year (Required)
• Threat Intelligence, and Security Monitoring: 3 years (Required)
• Qradar: 2 years (Required)
• Incident Response: 4 years (Preferred)
• Microsoft Sentinel, Splunk, IBM QRadar, Elastic,: 4 years (Required)

Language:

• English (Required)
• basic Aarbic (Preferred)

License/Certification:

• CySA+, SC-200, GCIH, CHFI, or equivalent. (Required)

Work Location: In person